Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d072393-1135-3465-91b9-5c7c03a633a4.roa
File:                     2d072393-1135-3465-91b9-5c7c03a633a4.roa (raw, json)
Hash identifier:          B88msqlrIl/S+B1jsoxw6QIzW+2GqXjdiU0tViZ0EJs=
Subject key identifier:   31:3A:B3:05:D7:B0:9B:AE:D0:CD:CB:FB:FF:FF:FD:01:55:2A:39:18
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AA97E59704819AAFC3B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d072393-1135-3465-91b9-5c7c03a633a4.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2600:6c90::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:a9:7e:59:70:48:19:aa:fc:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=fe94d3cc-7b66-4857-a4fc-1e1a10a98a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:2b:bd:7c:ca:1b:fd:6e:03:5d:8c:b6:bf:e8:
                    db:96:53:81:1a:c6:28:d5:4e:0c:49:4c:b7:ab:59:
                    73:24:d1:5a:e8:e1:f4:90:51:01:c8:83:40:27:c0:
                    58:4e:48:b6:92:9c:96:23:6b:4a:5d:08:33:15:13:
                    87:4b:3a:06:86:a0:dd:76:6b:9e:e2:23:f6:54:f1:
                    2e:6a:e7:1a:ea:18:30:69:5b:1f:ee:06:cb:c5:6c:
                    12:3a:03:5e:4c:07:dd:aa:75:4e:f1:e8:91:9f:e5:
                    d9:ee:99:77:54:68:a6:2a:57:eb:c8:dc:42:d6:d5:
                    54:2b:22:8c:33:06:8f:f4:01:ca:d6:05:d8:b3:21:
                    45:30:1f:33:ea:bf:aa:98:aa:2e:5f:fa:f1:2a:6a:
                    e3:fc:c7:11:54:57:f1:61:a4:ad:41:35:d1:60:79:
                    17:71:6a:bd:c2:9f:00:fb:93:5d:16:68:26:80:ff:
                    3c:ff:a6:0d:78:11:b6:b2:6a:9f:5c:d8:ed:38:52:
                    09:47:ae:a4:91:cd:d7:1f:de:23:c7:5a:05:2a:cc:
                    84:b9:c7:c2:be:f7:6f:be:4b:6c:a9:e2:9c:f4:d2:
                    20:96:9f:22:96:80:40:e2:74:7c:38:f0:d3:9d:f6:
                    1f:50:ca:3a:fe:c6:6c:8d:4c:ed:e2:48:9b:40:f0:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:B3:05:D7:B0:9B:AE:D0:CD:CB:FB:FF:FF:FD:01:55:2A:39:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2d072393-1135-3465-91b9-5c7c03a633a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c90::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:e9:57:7d:56:d8:70:0a:ab:2e:2b:7e:28:a2:3d:ed:df:69:
         ce:de:28:be:4f:b7:47:2b:83:b2:47:48:a8:c0:de:57:ab:0e:
         7e:04:a5:79:b0:e3:ad:7c:a5:a5:c4:2f:aa:ab:90:e4:85:df:
         dc:53:19:ed:2a:23:d9:53:ed:0c:f1:4d:84:db:c7:db:95:f0:
         95:a2:6c:4f:84:b2:22:60:cc:23:a5:38:eb:c0:7c:0e:2e:c8:
         ac:21:7f:84:64:9b:9e:21:6f:d2:a4:15:ac:c4:69:07:1e:24:
         01:55:ba:0b:a2:04:89:c6:29:9d:7f:76:2e:4d:c4:8e:69:a1:
         35:db:d3:7c:62:f9:ac:9c:62:d7:df:42:6f:75:85:09:47:1e:
         1d:ec:3b:df:1d:45:52:4c:49:05:d3:fa:e2:bb:4f:c0:d5:d5:
         c1:d6:a0:36:c9:0b:70:3f:7b:ee:56:4b:1d:49:2e:ac:6b:2c:
         bf:1e:f1:0b:2d:4b:4d:10:9f:82:65:c1:06:03:47:8e:aa:cd:
         4b:2f:60:82:84:42:5d:83:cc:46:14:91:62:d6:dd:02:00:de:
         9d:6d:ef:a4:61:03:f1:7c:d0:e8:d6:be:e3:de:56:7f:c7:6e:
         72:bf:1e:19:60:4a:7f:57:b6:e6:56:03:29:7e:64:60:0e:de:
         97:0e:72:6a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnCCql+WXBIGar8O4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZmU5NGQzY2MtN2I2Ni00ODU3LWE0ZmMtMWUxYTEwYTk4YTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Cu9fMob/W4DXYy2v+jbllOBGsYo1U4MSUy3
q1lzJNFa6OH0kFEByINAJ8BYTki2kpyWI2tKXQgzFROHSzoGhqDddmue4iP2VPEu
auca6hgwaVsf7gbLxWwSOgNeTAfdqnVO8eiRn+XZ7pl3VGimKlfryNxC1tVUKyKM
MwaP9AHK1gXYsyFFMB8z6r+qmKouX/rxKmrj/McRVFfxYaStQTXRYHkXcWq9wp8A
+5NdFmgmgP88/6YNeBG2smqfXNjtOFIJR66kkc3XH94jx1oFKsyEucfCvvdvvkts
qeKc9NIglp8iloBA4nR8OPDTnfYfUMo6/sZsjUzt4kibQPAPZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDE6swXXsJuu0M3L+////QFVKjkYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmQwNzIzOTMtMTEzNS0z
NDY1LTkxYjktNWM3YzAzYTYzM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgBskDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCp6Vd9VthwCqsuK34ooj3t32nO3ii+T7dHK4OyR0iowN5Xqw5+BKV5
sOOtfKWlxC+qq5Dkhd/cUxntKiPZU+0M8U2E28fblfCVomxPhLIiYMwjpTjrwHwO
LsisIX+EZJueIW/SpBWsxGkHHiQBVboLogSJximdf3YuTcSOaaE129N8YvmsnGLX
30JvdYUJRx4d7DvfHUVSTEkF0/riu0/A1dXB1qA2yQtwP3vuVksdSS6sayy/HvEL
LUtNEJ+CZcEGA0eOqs1LL2CChEJdg8xGFJFi1t0CAN6dbe+kYQPxfNDo1r7j3lZ/
x25yvx4ZYEp/V7bmVgMpfmRgDt6XDnJq
-----END CERTIFICATE-----
Generated at Sun May 11 09:17:08 2025 by rpki-client